Privacy Policy
Last updated: July 5, 2026
Introduction
1.1 Policy Purpose
This Privacy Policy describes how The Brand Path, operated by Evelina Ljungbeck as a sole proprietorship registered in Sweden with organization number 970816-2863 (“The Brand Path”, “we”, “us”, or “our”), processes personal data and uses cookies when you visit thebrandpath.com (the “Website”), purchase The Brand Path digital products (the “Products”), subscribe to our newsletter, or contact us.
1.2 Data Controller
For the purposes of the EU General Data Protection Regulation (GDPR), we act as the data controller for personal data collected and processed through the Website, newsletter, customer support, and related business activities, except where another party acts as an independent data controller as described in this Privacy Policy.
For payment-related data, the third-party checkout and payment provider identified at checkout, including any provider acting as Merchant of Record, may act as an independent data controller.
Information We Collect
2.1 Information You Provide to Us
We may collect personal information that you voluntarily provide to us, such as your name, email address, billing details, order information, newsletter subscription details, and any information you include when contacting us by email or another communication channel.
For example, you may provide personal data when you:
Make a purchase;
Subscribe to our newsletter;
Contact us for customer support;
Request information about a Product;
Communicate with us by email.
2.2 Transaction Information
When you purchase a Product, we may receive or access information about the transaction, such as order details, purchased Product, purchase date, payment status, customer email address, billing information, and related transaction records.
We do not store full payment card details on our own systems.
2.3 Newsletter Information
If you subscribe to our newsletter, we may process your email address and related subscription information to send you newsletters, product updates, promotional emails, and other communications you have requested or consented to receive.
You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us at hello@thebrandpath.com.
2.4 Usage Information
We use Framer Analytics, the built-in analytics tool provided by our website platform, to understand how visitors use the Website.
Framer Analytics does not use cookies. It calculates unique visitors by hashing your IP address and browser information together with a secret value that resets daily. This means that no persistent record of your individual activity is created or retained for analytics purposes.
We use Framer Analytics to view aggregate information such as page views, visitor counts, traffic sources, and general Website performance. We do not use Framer Analytics to identify individual visitors or track you across other websites.
We also use UTM parameters in some of our marketing links. These are tags added to a URL that tell us which channel or campaign a visitor came from, such as a specific social media post or email. UTM parameters are part of the link itself and are not cookies; they do not track you across other websites or store information on your device.
Cookie Statement
3.1 What Are Cookies
Cookies are small text files stored on your device when you visit a website. They can help ensure a website functions correctly and may support features such as security, accessibility, checkout functionality, and basic site operation.
3.2 Cookies We Use
The Website currently uses only essential cookies where necessary for core functionality, such as security and basic site operation.
Essential cookies do not require your consent under applicable EU and Swedish rules where they are strictly necessary for the Website to function.
We do not use cookies for analytics or marketing purposes. As described above, our analytics tool is cookieless by design.
3.3 Payments and Cookies
If you choose to make a purchase, you will be directed to a checkout process operated by the third-party checkout and payment provider identified at checkout. Any cookies used during checkout are governed by that provider’s own cookie and privacy policies, not this Privacy Policy.
3.4 Future Changes
If we introduce any additional cookies in the future, such as analytics or marketing cookies, this Privacy Policy will be updated accordingly. Where required by law, you will be given a clear opportunity to accept or reject non-essential cookies before they are placed on your device.
3.5 Managing Cookies
You can control or disable cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the Website.
How We Use Your Information
We use personal data for the following purposes:
To process, confirm, and deliver your purchase;
To provide access to Products;
To provide customer support;
To communicate with you regarding your order;
To respond to questions, requests, or support inquiries;
To send newsletters, promotional materials, and other communications you have requested or consented to receive;
To provide, maintain, secure, and improve the Website;
To understand aggregate Website usage and improve our content, Products, and services;
To comply with accounting, tax, legal, and regulatory obligations;
To prevent misuse, fraud, unauthorized access, or unlawful activity;
To enforce our Terms & Conditions and protect our legal rights.
We do not sell your personal data.
Legal Basis for Processing
Where GDPR applies, we rely on the following legal bases:
Contractual necessity: to process and deliver purchases, provide Products, manage orders, and respond to purchase-related support requests.
Consent: to send newsletters and marketing communications where you have subscribed or otherwise consented, and to place non-essential cookies if we introduce them in the future.
Legal obligation: to comply with accounting, tax, consumer law, and other legal obligations.
Legitimate interest: to operate, secure, maintain, and improve the Website and our business; prevent fraud or misuse; respond to non-purchase-related inquiries; analyze aggregate Website usage; and protect our legal rights.
You may withdraw your consent at any time where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Payments & Merchant of Record
Payments for the Products are processed through the third-party checkout and payment provider identified at checkout.
Where that provider acts as Merchant of Record, it may be the legal seller for transaction purposes and may be responsible for payment processing, applicable tax calculation and collection, refunds, chargebacks, fraud prevention, and related transaction matters.
When you make a purchase, relevant personal data, such as your name, email address, billing information, transaction details, and payment-related information, may be processed by the checkout provider or Merchant of Record in accordance with its own privacy policy and applicable data protection laws.
The checkout provider or Merchant of Record may act as an independent data controller for payment-related and transaction-related data.
We do not store full payment card details on our own systems.
Sharing Personal Data with Service Providers
We may share personal data with trusted third-party service providers where necessary to operate the Website, provide Products, process purchases, send newsletters, provide customer support, comply with legal obligations, or manage our business.
These providers may include:
Website hosting and website platform providers;
Checkout, payment, and Merchant of Record providers;
Email newsletter and email delivery providers;
Analytics and website performance tools;
Cloud storage, file delivery, and business operations tools;
Accounting, tax, legal, or professional advisers where necessary;
Public authorities, regulators, or courts where required by law.
Service providers are only permitted to process personal data as necessary to provide their services or comply with legal obligations. Where required by law, we use appropriate data processing agreements or similar safeguards.
International Data Transfers
Some of the service providers we use may process personal data outside the European Union or European Economic Area.
Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards where required by applicable data protection laws. These may include adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.
Data Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.
In general:
Purchase and transaction records are retained for as long as necessary to provide Products, handle support, resolve disputes, comply with accounting and tax obligations, and enforce agreements.
Newsletter subscription data is retained until you unsubscribe or we otherwise no longer need it for newsletter purposes.
Customer support and email correspondence may be retained for as long as necessary to respond to your inquiry, manage our relationship with you, resolve disputes, or protect our legal rights.
Website analytics information is used in aggregate form to understand Website performance and is not used by us to identify individual visitors.
When personal data is no longer required, it will be securely deleted, anonymized, or otherwise handled in accordance with applicable law.
Your Rights Under GDPR
If GDPR applies to you, you may have the right to:
Request access to your personal data;
Request correction of inaccurate or incomplete personal data;
Request deletion of your personal data;
Request restriction of processing;
Object to certain processing;
Request data portability;
Withdraw consent where processing is based on consent;
Lodge a complaint with a supervisory authority.
Some rights may be limited or may not apply in all circumstances, depending on the legal basis for processing and applicable law.
To exercise your rights, please contact us at: hello@thebrandpath.com.
If you are located in Sweden, the relevant supervisory authority is Integritetsskyddsmyndigheten (IMY). If you are located elsewhere in the EU/EEA, you may contact your local data protection authority. Depending on where you live, you may also have rights under other applicable privacy or data protection laws.
Data Security
We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
However, no method of transmission over the internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when the Privacy Policy was most recently revised.
Any updates will be posted on this page. We encourage you to review this Privacy Policy periodically.
Contact Us
If you have questions about this Privacy Policy or how we process personal data, please contact us at: hello@thebrandpath.com.